@tanstack/router-devtools-core

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating some uncertainty about direct package ownership; the organization-backed monorepo context partly offsets that concern.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations less transparent.

Token permissionscaution

Five workflows use read-only permissions, but three workflows declare top-level write permissions, including release automation; this increases repository automation exposure somewhat.